■PXm^Bm .:a:menc3i the oLaims a^a- iadi:C.a.t:a'<i te^Xow., Thm 
filled and new matter lia^^ feeen a4da:d:y 

L ^eiirrently amended J In a iiistvrar^ a method p£ prpeessing 

;a.> r^ce wlnp ' an e-maii: • message ^'rom an -uiikn^attfn :sen^ 

b) regu^^tinigf iriformation about the aende^r fxawK at 
laasit -Qne :da;tai?ase; :fckat' coitpiie;©;- -^gipbal, :St:aii.:S.ti<:::3 aiifeout 
sendigrs based on information about the sender recei:v:ed from 
re:Gi|D±eiit.B: ±n tim :riatw!:>£-k>- wherein ;<^ompilina afeatist ics 
ihdlude^ determining a ratio reflecting: whether the sender 
sends a maijority of mesdaiges to reieipients v#io have i^gg^Xiig^^ 
the sender on a wiiiteliBt ^ wherein: the statistics are used. tO; 
determine a sender' s reputation^, wherein the sender is 
identified based an data in the meaaage header incl tiding at 
least xjrm of- the f o'liot^ing: 

i) an aGtual sender; 

ii.) a final IP address used by the sender;. 

iii) a final domain name used by the aender ; or 

iv) , an iP J5ath used by the sender;- and 

c) categorizing whether the e-mail message is good: 
based on inf ormat ion reoeiv-ed about the sender ' s reputation,, 
^where-iii, the e-mail message is allowed through a recipient - s e- 
mail filter if the reputation is good and the e-mail; message 
Is xmk :al lowed, through^ the. e-mai/1.^ fl^itear if t.he. :reput.at.ioh. is 
eather not good, or- ^.ot knowh.. 



■2,. :(arlig[ina:i) .Tkm iftethod o:f^•:qX■a.;lm 1. ^-vvfher^dn- fche; acfeual sender 



a) 


an a-mai: 1 addrreas iised by the sender; 


b) 


a: 


display name -aB^d. by the;: s^ende^r:; 




:a 


dotnaxn mme ytsed by the sender; 






final IF addresa used by the sender; 






£lnal doma±ri- ;^ame: us^ed by the sender ;' 


t) 


a 


user -"agent::; 


3) 


a 


fe±nte.zQne-;:- 




:a 


source IP address ; 


i) 


a 


nam^ of el lent soif t ware used by ^^t^ 


I) 


•a..: 


;sendmall. ■ i?ers:i©^ ua^etd^ by a ^first recjely^er; and 


k) 


arx i:^ ipath i:teed to route thte message , 



3 . (original) The niethad of el aim 1 wherein the actual sender 
is itientif ied by a signature ine:l tiding a range of IP addressas: 
and at least one of the fallowing f iejlds f ram the message 
header : 

a) ^ an:,: e-mail ■ad:dress used by the- sender-; 

b) a disE>lay name hsed by the sender; 

c) a domairi name used by the sender; 

d) the final IP address used by the sender; 
:el the final domain name^ used by the sendeir-; 

t% the, ham-e; of client ^^Qftware used by the aGtiaa:! 



■sender-;: 



usier- agent 
tiTTieisc>ne:; 

s:ourQe IP^ :addre.s:s^; 

s.^ndmail. Y^i^Blm^ ^sed by a f:|.rst receiver-;, and 
the: i:p pa:th: used: to .route- the- :Hie:SSiag:e.-. 



i) 



4 . (original) Ttae nvefeftpd p£ claim 1 v^i^^reln the at l;!e;a:st Qxxe 
aatafease; Inclucies one of €im f ollQv^lng : 

b.) at Xeasfe t^v^a .Gerit rally-maintain^^ datatoaBieB, :ea;c;ih, 
s^toring ■ an<a ■ eo cixCf.pr'ent. iriforinatiQn aricii ^abafctiat^ics:.,, 

5 . (originai) Tim- method of 0laiiin 1 further q:Gitrg?risiii0 ijtsing 
st-^t/i:§;tiG;s; .:C:c>^ at t-he at Lea^t Qiit^:. :;idat:aW oOTiiput^i -a' 

^dbr^ lndxGa:ting; a iikelitoGd that the Te^<mi^^& mBB0mQB xb an 
utisdjliciit^c^ message . 

5 . ici>rig[lnai) Th^ metiiod of Glaim; ;S whereiri the score 
irlprea^eB as a nuttftser of accept^ed having the same 
inf ormation, abbtit the sender ais the received message 

increa;3-es:^ tfee inf c^rtnation- inigluding mm b.f the-^ •;gplic^ing t: 

a) the actual sender; 

b) a final IP address; 

cj a final domain name; or 
d): an IP path.. 

7. (original) The rnethod of Glaim 5 wherein the^ soore 
decreaees as a nnmher of rej ected messages hav^ing the same 
inf ormation ahout the sender as^ the reQeived message 
.in:c.r eases, the^ inf oxiiiation' inGltLding one of the following; 

a) the aot\ial gender; 

• h)' a final IP address; 

g) a final domain name; -or 

dj. .an IP^ :E>a:feIi. 



■B.-i (o-3rig:toai;) ■•The., ni^^bod;: of cla;:iTn l £iirt:fae^r <3.pmp.risi:ng- 
■t-raGtei.^g :at: least- ::Oil^ of tAm fc5i:lawirig- piec^;^ of :i;nfor?T^at;iG3:a- 
about messages fsram sesnders ;: 

a) a total jiumbsr of mesaaQes aerit:; 

p3red^£:er mined time g^eriod; 

e) a total niJrtriber o€ n^saag^s ^erit t^ irBcipierita in thm 
net\!tft>2r}c who hmt^: iTieliic3@d the sexli!;er ori a whitelipt ; 

d) a number of messages: s^nt to recipieates In the 
rieti\^brk who haij^e iricl^:icJed: -^the a;eTi<ae3^ cm 'tiim Vkggittellst;. lOiurer a 
^eeoind pr^cJ^terittirxed time jE?er±o<l^ 

e ) a itt^ttribe3r of riseiplants who ha"V^e inGludted the sender 
0h -thi^ x^ecipient '' s:: whlfceiist 

f ) a total nUTtiber of txraea a reaipaent chaiige<3 a 
gender t^^Mital.XBt/biae^k^^ st-atua 

g) a nuiTiber of times a recipient changed a sender 's 
whitelist/blaGkiist status over a third predetermined time 
period; 

h) ' a. total: riijmber of mesaageB sent to recipients in the' 
network who have not Included the sender on the whitelist ; 

i) a number of messages Bent to reoipienta in the 
networfc: who ha^e not included the -^sender : on the white! is. t over 
:a. .fourth predetermined time /period;; 

3) a total nuiTiber of : ■unicjue recipients in the network 
v^ho have received at ieast one measage from the sender; 

k) a^ total number of messages sent to unique reGipients^ 
in^ the: networjc^ who ha^e inoludec^ the sender pp^-the wh.ii5.0li.st.r. 
and 

1) ^ total nurnfeei* of messages sant tt> uniqtie ri^qipi^hta 
in -the netwo^rk whci have: xiot. .i.iielud:ed.. /the: .^e^der. • ori ^tha 
white li0t,^ 
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lA/Eerain -kirn 3e;ri<ier i^^- ;.iden;t.i:fi;ed by ^pim e^f- -the igrp^jp^ 
■dbrtsxBfcxTig- of the: .-^ctu^l •Siende^?-,. :tii^: final IP m^tdr^sm-r. 
f irial <iorna.in... xiattie^/. path usad; feo sencJ :tbe ■message.. 

g . (Giirrentl5?r atnanded) The metthod 08 ciiaiTrii 1 wfoarel 
cdTupiling, •sfe:at:i:S't:.x:c^ .abo^t- 0:erid^rB inal^adea afe- iaasfe. ope of. 
tii^ following r 

messages; sienti iiy a sandier' to r^qipi^eritB in the i^etwork: who 
hetve-- xrialueied. tihe- ^semJeir' -on- ^ wtiife-^li.afc-: :im. a. ;p^redefee3^inine<i 
fe±m0 ;peiriod divided by a seccmd number of e-mail ttieasagea ©enfe 
t>y the sender tto users in the network In the pi?edefce^ 
fciitte period; 

b) deterteining a ratio of a f i rat number: d recipient© 
in the network.: who. .have: ino-llided- the render- on the white I^i^t: 
divided by a second nuiriber of xanicgue reGipxents in the network 
who received e-mails f rotn the sender in a predetermined time 
j?er ipd ; 

c) determihing a ratio of a first nuinbar of times in a 
predeterrained time internal a rnessage from the aender was 
mov^ed from a whitelist to a blacklxBt divided by a seoond 
nximber of times a message f roiti the sender was moved f rom a 
whi^telist to;: a blacfcliBt 7. 

d,)- determining a ratio of a first number o:f times in> -a 
:j5redetermined time interval a mesBage :f rom the sender was 
■■^moved from a blaofclist to a whitelist divided by a second^ 
■ixiimfeer of tim^^s;^ a mes:S:age .from' the. sender wajs.- raQved frpp 

blagtel.iB:t ;.t.Q a. wh.itel.ist,^ 

e) determinihg.. a 'ratio of a first number of unigtie. 
■ti:a;era ■^within the :net.wo:rk whO;; whiteliBte;d the :s:ender within a 
:-p:redeterTnined ^fe.ime period :oo:m^ared to a second number of' 

unique ttsera within the- network- who. .b^ the;. .s:ende.r 

within the- predetermined., time- period; 



^ ^ ^<s^mdning a. ■■ ar^fe40---OEro£i^oct:-to fete 3eiacig:>-;g- 

Waiiti^d mes^aige^ sen*: toy the seri?3;er iec>mg)a:red; to a 0^£3orid Tixinafe^i^ 
pf xjn>^?^bed or total messages sent by tiie sende^r; 

fet deteriijinlng a dif ferenee toetween a f irst niamber of 
0x|)^e:t::ed HiesBages ^:e:ht By tha ^sfender ' aitd :a. ^sedorid -rmtife o£ 
uriaxpe^cted /meBsage^'- ■seiifc' by thei seinder;? 

h:) determining a dlf f efiri^rice: -BetVi^e^in- "& fl:3::st mittisie^ir' o-f 
time-s- '.a tis^r- wtLl't'eliated a. rhiessMge; from "tim sender' a&di: 'ia 
seGond nutiitiber of titnes m us^r blacklisted a ftiessage f roM the 
Sander; ^rxd: 

^ x)-' detertniniiig a difference iraf leetingi whether the 
sender sende: a majority of rneasages^ to knb^n..- r^dlpiants-^, 

wherein the sender is identified by one of the group 
consisting of th^ actual sender^ the final IP address> the 
final domain n^ the IB path used to ^^e^^ the message , 

10 . (original J T'he method of claim 1 f urther comprising 
placing a message whioh is: -.s^pfe .allo^^tfecl., through the: e-nta.i.1. 
f ilter in. a spam: f qlder ,, 

11 . ^original) The method of claim 10 further comprising 
■monitoring the spam f older-- atr predetermined tO: 
cie:t:^rmin;e:: -whet:h6.r' .mes^sages ixi 'tfee f older should he. reieas.ed- 
heeause; ■ the reputatlqn: :Of the sender has cha^nged.. 

12.. (original) -The method.- of .■plaim- 1. .furthe^r- ..coi^risrng; 
■mphitoririg .the inbbx at- predeteirmined .intervals to dfetermine;; 
Wheth^ir me^is^iages ••■should^ 'remaiiia-. In the inteoix'.* 
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^TFtaliitaining; at.- ttie cS?^feabaB:e at: ;;X;ea;st:- ;f our of -feiie f bl.Xow4:r)Lg 
lvalues ; 

a) n njumiber messages wkicti weire exp:Ii(5itly 



ci) a nufnfeer of messa^eia which w^r^ ^xjilicifcly xi^antked; 
ba<if arid 

bad; 

wh^retin fcha imlues are bas^d on titessagee hav^in^ the sarrie 
inf oirmaiiion about the sexider inciufiing on^ of the follpwing? 

a) -febfe ^Ignatijirej; 

b) a., f inal. IP addiresa usied by the:- aeridar;; 

g) .a f inal ^domain name used; by the aexider;: or 
d) ah IP path used by the sender . 



14 , ■foriginalX The: method of claim:: .13 ■ wherein- t-h^e vml'ue^a 
i:epiresent one of the f olldwiiig: 

a) message cbunts; or 

b) ratings of Uhlque tiseirs within the network. 



,iS.,. :{:originaI) The method of Glalm 14 fHrther corop.rising at^ 
least fou3r of the Wlues being returned to the recipient to 
■ allow -the reqipl^ht- to apply dif f ereht- weighty to: a message ±n 
order fio: :cafcegb;rlze the message^ 



t-ira<j}^irtg- .l:d.eal Btatiytilcss: ::abQTUt senders- i^iientexiS-ii^d hjf data, in- 
tJci^^ :rne;S^fea9fe:-. ■h;€s:a:c3e£'' -^t .a: local dafca&aBe:.* 

17 , {orlg^iiJ^^l) THe metbod of claim 1 £ tirfeiiar QotrpriBin^ 
assessing t:lSe repufea;ti;G>n of the BeticiiS:^ of a received messagiS 
^^^tieri user act.i^it:^ i^s obaarvesd . 

IB , (original) XJae metihdd of clairti 1 fiirther comprising 
sexiding reoipierita a ribfcif io airf Bender reput:at:iOn 

19. {original) Tlie mefetiod of claim 18 furtlSer compriBing 
re'v^iawing all messages receiv^ed in a predetermined time period 
.preoeding receipt of', t'iie not,if iaat;lon and npdatiiig ttXB 
catagorization of the -meBsage :as neeeesary-* 

20- (currently amendad) In a network^ a trie t Hod of prooessing 
e—mai:! meB sages- compriBing :; 

a.) ;ra:ceiving information about e-mail mes>sages f rom^ 
■reeipiejit.^ of- ttoe mes^sages in t/tm ::ijet;w:qrkv whtare;L:n. ^t^iie 
inforination received; incl-udes;.: 

i) an identification of: a. iaeaader :0:£, first 
trtessage., v/kerein the identif ication is fea.:s;^d.: ;Qn; d^ta .iri; tixm.. 
■Tae-8sage- 'laeader- .and includes- -at,, least: orie of-, ^the f glloirtriHg;: 

an ':aGtiiai. ■gender:; 
B) a final I.f-- a<Mre;ss iis-^d-' :by- thm aeirider; 
:G)^ a f iiita 1. . doma;in \name iis-ed :by tjie. •sender; or 
D'^ mx ::i:P pat|i-. used. :.by ^ the .render ■; arid 
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:SLn -indioataon -ol':' wke^her' 'tha recip'ient: 
.•corts-id^red. tfee >£:i£'.Bt ^meaaage: gooiia.. csr^ ba4.^- 

a fcotal ;iiomfoer og- ::me;ss:^ge.s Beaint'^ -fcQ uniqij:^ re:G-i:pi^@iafc.0; in., t'h^. 
iietwork who Have iii^nluded thm Bender orx a wticLtieii st; ; arid 

c) eif^aLfeingr a list of ^ender^ with goa& ir^ptltatip^ia 
t]^at may fee refear^nced -bjr i^eci^ienfcs of messages f rQiTL: unJOTown 
^eSidfer^s in tWe netA^^feir^, \ft^:^3r«^±n a &]ecoi:id meBsag^ f rcwi one 
Sander qn fch-^ 3.i^.t:: allo*^d tKrQ\igfh -a:- mc^^ 

f ilter atid WArd message f rom another Bmi^x: not on tke list 
not allowed thi^o^igh the jreoipifenfe^a e^-mail filter*. 

21- (original) Tiie method of claim 2G wherein the actual 
sender is identified fey a signature having at least two of the 
following £.i;el:dB: f ro:m.' f he Trie;S:sage^ : header"! 

a) an e-mail address used by the sender; 

b) a dispil^y name used hy the Bender ;; 
g:);: a domain name used by the: sender; 

d) a final IP address used by the sender; 
ej a final dornaian riame used by the sencier ; 
f;};. a: u^er-agenf 7 

g) a timezone; 

ii) :a souroe IP addres^.; 

i ) :a :name- of client, splitwai-jje u^ed;: sender,; 

j ) ^ 0endrriai.l yex^sibn used '^by m f:^r;s;t pBq^i:^^.; ..^hd. 

Mi an I'P^path. u:S:^d t<s.. :xout.e :.t:he me::asa:g[a*.. 



,2:2* ..(oiriginal') The method of ^:alaim 2.I.- wh^r^An the aefcuaX 
•:8tferid^r iB Identiif ied a. .s:lgjiiat.ti;r:e- Incliiditig.: :a- range-- ^o.£ IP 
:;ac2dr0:S^.es ■ and at" :lea0^ .-oii!^ of: - the :;£dlldw-i:riQ £:i^eld0 Erom-. iMm- 
•tnes'sa^^; iieader- * 

a;) art add3^^ess lis^d by the setid^r ; 

b) difplair name tised by the sender; 

g) a d6maih tiam^ laised iy^- fehM sender; 

d) the final IP address li^ed b^ the ©eiicMr? 

e) the final domain name tased by^ the seiider ; 

f ) the name of clieht software used the acStual 
^eii^der? 

■g ) ■ u. a:er ■-• agent 

h) t'i;me::203Sej: 

i) source IP-: ^ddreaB-; 

j ) sendmail version uaed fey a f irst re:eeiver7 and 
.k:), the.: IP path used to route the; me:B;sage-*^ 



';23-.* Xoxiginal)^ The: met hod of o-laim 2'D, wherein the at- leaBt 
one: database: inoludes one of the f ollowiiig:: 
■a:)- a central databaae:;, or 

at least two cent rally -^maintained, database-s, -each 
:ato:rin0^ amd compiling: dif ferent information, and .statisticp... 



..24;. ■(or:igin:al::) The. me^t of claim :20 further comprising; 
■^aeing statist-ics ppmpiled at the at. least, one databas:©-- to. 
:de:ta.rtnine.. -a sender- re^^u taction.. 



2^3, {:drig:i3ia.l J The Tnethod :of- cla^^ further cpjT^:ri::slin.g 

adding -.a- ■s:ender- -to the:- l:±;S:t- ::wh:en fehe^ isen:dier-'';a reputafc'ioti- 
p4:^:a:e:S- a. prede^teritiined:: thr:e^hdtd ind:i:cati:ri9' :a good- :r:ep^fcat.:i:Gn,.. 
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26 , ^brigirta:!) Tfee nfethod of claim 2^ fuirfctieT: coTTvprisirig 
jf^mbvihg a seiider from the liat: ii#aen the sender rapueafcion 

27 * (au^^t^eiitly airtendaS) Tiha method of Glaim 20 f urther 
bdffipri^^^^^^ feirackihg at l^stst of tha lollbwiiq:^ p±ei0B^ 
inEorinatibn aibotit messa;ges from seriders ; 

a} a tiot:a.3: min&)^^iir- of- ttitesMagi^a:- /^j^nt-;- 

b:): a tibtai niinflDer at: 'rne-ssagea .seiife; b^er first 
^reet^t^rpinetp: t^lme period; 

c'J a ^t;bfe:al titimb^X' of meHBa3e& •■^snt to -^re^GlpientrH 
in the .riefcwo:rk: haxre iiicliidecl the :i3:etide:r ' :bi:i a ■Whitelist.j' 

c3) a niHTTJiier^^ of: ■rhesHa;g:e^ . •:B:ent: tb^ •reO:Xpie:rxbs in- the 
network who have included the sender on the whiteliat over a 
secoiKi predetermined time period; 

.e) -a. ■niirTd[>e.r of recipiehts who- have inO'iuded: the.: 
sender on the; recipieht' a whit el is t; 

f ) .a total. iQumber G;f time:S a recip-ieiit- -charigfed a. 
sajider-'' S:: ^\tfhifc#list /blackli ■status;; 

g) a riumbeir of timeB a recipient changed a 
sender' s whitel:4s:t.:/lDla.gk^ -Status., .over a: third p:redetf:rmiii^.d 
time period; 

h) a total number of messages: setit to reoipie.nt;S- 
in :the network -who have hot ihciude.d. the sender on "tim 
.iwhitelist ; 

i) ;a, ^BUin^er of mesBag^^^; -^egafe 'to.. ^ in: the 
tie-tiWOrlc who have not iricltided the seiid^r on .t^h^ whi.te;i.i'S:t. over 
a feburtk ■•prede;termined tinrie: ^period ; 

j ) a; total -^lamiihier- of unigua recslpierifcs- in trhm 
network •■'who^^ have: received., lat^ l:eaat one.; mes:j^.aga- friom: the 
sender; and 



i I5) ^ total number of rnessiagFes sent to uiiidpti^ ir^cipi^nts 
ia the xiet^tf^ tl<st iTi<^lu<3fed tii^ seiicier mi the 

white;! i sit ■>. 

Wil^reiti^ the ^^ioc^r is identif ieci i>y one of tii^ groH-g? 
GonaiBt-iftg' of tlie- -actua:! aeridery ^'the^ fi^iaLl IP •■■ad:di:esi:^v tJtm 
f inal domain n^me, or the ::XP path -11:$;©^ ^to B-end' the ■■•me^:sage . 

28 . (oriaihai) Xhe method of olaim 2Q wherein coinpiling 
st:atis:ti.cs; aboiut. ..siehdieari?- -ineXudeB- at: ieagt one: of the.- 
f oil owing ■ 

a:) determining ratio of fi^irst 'tltintBei: %-:tnail 
messages sent by a sender to recipients in the network who 
have included the sender on a white! is t in a: predetermined: 
time period divided b^^ a second number of e-m^il mea^ages sent 
by the sender to users in the network in the predetertriin^ 
time, period; 

b) determining a; ratio of a first /number; of recipients; 
in the networlc who- ha^e included the sender on the whitelist 
divided by a second nuiTtber of unique recipients in the network 
who r^oeived^ .a:-TTia.i!.s: from the sende^r^^ in :a :predet:erm:i^ned. ti?ne 
■piieriod::; 

g): deterTTiining ^ ratio of :a;: /f irst; ;.nuixtber. of tiirtes in ^ 
predetermineci time interval a raessage f rom the sender was 
^^tiio^d from a whitelist to a blacklist divided 'by- a second 
:^nianiber- of times a message from, the; ^send'ej::: was ^-rnQvad from. 
:-whit.ei.ist to -a. blacicii-st^- 

c^-); deterTtiini-ng' rat-io^ :Of a first .ntimber. of t:i:me;S:^ in, a 
prfedeterm^^ int^ferval a mess^^^ f rom the sender was 

moved from a blacklist to a whitelist divided by a second 
'number of -itimfe^:- .a me;ssage firoTn; t3cm sender- was moved: from; .;a 
blackll-j^t 'to si- -iArhiteli^t:; 



e) cietsrra^ a^atio csf a floret niiiribe^^^ unique 

pos^edetiermln liirtt^ ^airl^d: Gbrcipairad to a second m^Jribe of 
fclnique tisexrs witihin th^ riet:w^c>T"k wtiD biadfellsfc^d thfe seiider^ 
Within.. ;t%p: .pi;^a^Ste:ll0i:mi;^ t^-ime period f 

£) d^ter^rttiniri^ m ratio re£leGt:ing whether the sender 
seiids ^ ma j c>:Jr±t^ bif messages tb recipients v^ho have ±nGlud;ed 
the .s;en(ie:Ef Qn' the iA?hitell 

.g;}, d^tes^minxng a. ratio reflectirig; a. f Ira^t- mimber .of 
v^ant e d me s sage a se rit by t he seridei: battipared t o a seGbiid iiiomber 
of uriwa^itad. or totai ;me;a:0age6- ^seht t>y the- ■se.iider'-; 

h) detartnxnixig' a dif f e^rettce- -feetweeh' a. iSis^st. niirrtbea?: of 
:e:KpeGted :me:eaa9es :^eijt- iSy the^ ^Beirideiir arid a- :3.e:e«srid' ■huttibeir: -of 
:mie.xpeiGted mes-sages^ s^i^tit by the ^e^ide^a^:/, 

i) detearmiiiirig a dif £0^01103 between a first niinifoer of 
times a user whitelisted a message f 2:0m the sender mid a 
secoiid nimber- pf .tin^^iS' a. user b;lackli:Sted a message .from the 
:^er3Lde.r:; a;nd 

3) determining a d,i;f:fereTice reflecting whether the 
sender ©ends a ma j;ority ^ of ^meBsages;; to known reeipients , 

wherein the Eender is identified toy one of the group 
GQn:si;sting of' the: actual sender^, the final IP address.^ the; 
final domain name^. or the IP path ueed^tp send the. meiS sage.. 

(original) -The method of claim: ,20 further eomprising 
plaoing a.: ■meB.Bage: which.; .Ib not., .allowed:- t;.hrpugh the e-mail 
f. Liter in a. .^p-am folder-. 

■3:0-^ ;{ original:} The method, o-f :clalm 2;9: fu-rther opiriprleiiig. 
TooMtoring: .the $pam- •folder- at predetermiined inter-vals :;t0 
deterfttln^- i.n ■t.he f .older :Bho.uld..- be :releai^.ed 

i]Sedati.ae thex .reputation; of ;t.he sender has •cfea'nged.,- 
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;3X:,.. {03?lQ:l2lal| Tim Tiieifcbod oE .<^I^aim 20 further aatTipr^±:si.ri^ 
TO^^i.horiHg the. Inlppx at :|?r^d^tei?mi:ned' inte^tvaLsf tb -^deeermine..- 



maintainlrie at tlie d^tai:>ase at least; four of i:ifee fpllp^ing 



fe) a Hcuuiber of messages ^hich were iitipli<5itX i^anked 

good; 

cj) /.a number of meaa:agas' ^Whpa^^ Isx ujlfendwri;; 

d) a nijimber of meaaagp^; ^v^^ B5cpXi0iti3^^ raufe^d 
toad; and 

e) a number of messages wl^icte were implicitly ranked 

bad; 

wherecin the iralues are based pn meBsage^ liavirig the aame 
information about ttie sender inoluding one of the foil owing; 

a) . 'the -Signature;; 

b) a final if address lused by the sender; 

o).: a :f inal domain name used by the- /sende^r 7: or 

d) an I^e path used by the Bender . 



•33::.... -.tor ig inal) The method: of olaim^ 32 whasrein 'th^ vraluea 
represent one of the following r 
-aji.. m^BB-agfe count^s;.; -^or^ 

b) ratingB" of -^Uhig^ .the networfe,.' 



2.4,. ^to^i0iiaal): The- TOBfehad^of olai'm; 2;{3 furthest c.c«¥spri:Sa.xi0 
• t ra:-pfcl.ng ■ local .st.at:i-Btio.s .about is:ender:S ide£xt:i.£ied.- by ^^data i.n 
■the me^::s:.age: ■ at a looal database-:.:- 



33. .(original) The tnetiiod of claim -20 f urther aoniprlsing/ 
assessing tEte x^epufcation .of tlim. semMBi^^ of a. ^req^i-woL^ imessagie 
whtea: user a0ti:vity ia.. c)to;se:r'7ed>:- 



36. ^original.) The method p;f claim S-O further coBTprising 
sanding recipients a nofcif ieafcio^n when any seiieier^ a reputat ion 
qkatige s . 



3^7..., ■{original ): -^Tlie inetiioci^ of cl-aiui.- 20 furth^ex- cdimpriBing 

pr^eeAing receipt: p£ t:fee liptif ic^t:iQ3a a^not updating the 
■■ea:fc:i^^p3?i.K.al;iari of:' .the: ;rrie^;:sag!f;e. n^da^Si^^^ry^^: 



3B^ (currently a.m^ In; a la^twQrk, a system iar 

process irig e-Tria.il m^^sag^^ c<ani|>t^i^iii^: 

^i^r-^jr ural i ty e - f- "Saii i e^er^^ ^ maoDag erS^ 

:^" - p-^iiia?a3 r i : fey ■ ■ -of ' ' ' '-r^G d:pl;ont::p qM ■ ■ ' mox: iiv ■ ■ •moa ' pagm - B-"; - fe]-t 

^^ 3rG:Gipi.oj Br ta- :fa;a^^ - ^§[' a. ---i gd: T 3gt^ :n.^ft:^mxirb imMmj fa r f xHtcrlng 

0^.- at .le^S't one •a.a:t;::aJ>a:se' -in nefcworjc. •eefmi ^fc:i:Qix : 
aon^nun^i ca ipja witfe- i^fefese-; plurality of reaipienta of ife-mall 
TTies-sagea-/ each at the recipients having' a first sof tware tn^ajgis 
;f ojtf- f iltering rieceived- e-:itial:I;- ■■ messages :, the: dat afcaise: having: 
:aec:on(l: ^attn^re means fox per'fonning the following : 

i): receiviiig information about e-mail mesBages 
from the reGip'ientS: of the .meBBage.S:/ iwhere^in.. the in£:ormat.i;Dn- 
r ece ivea includes : 

A) an ident:i:f ication of a :s:ender of a f irst 
message: based on. data in the mea..Ba:ge- header; including at least 
one of the f ollo^itfing-; 



II ) a f in^l IP address iiafed -hy the 

ill) a £inal domain iiame used by tih^ 

aii: :I5* pafeh lip^d. tyyr -^ii^iid^r;; arid 

B) an iiidiaatlG^ti of T/^Ija;tl^eir t:iie 2i-ecipiejit: 
eQ:H.g4 dar:C:: d ■a^^aiSHif led , 'thm first me^^pag:©- as good -or bad; 

ii) QGmpiling statistics for sender of messages, 
whesrejn cotrpiling statistics iuclud^;^ deterniinirig a jratip 
re f lectirig -yri^iether the Bender 'S-ends' -a ma.j:Qri.ty of im es^aa ges to 
recipients who haw- incliided' the seitder. ■on a whlt'ells-t:-^. 
wherein t ha stat istics arfe us#d to^ :det.e:rmihe ^ eahdeir' 
reputation for sending good mesBages; and 

iii) sending statiisties- in reBponae to a request for 
:^otat.iHtio.s from;: the:: :recipi:ent of a: :mes:sage' from- -an unknown., 
gender > wherein if the sender has a good reputation the 
message is allowed thrpugh the f irst sof tv^rare means and if the 
sender has a not good; or not known reputatiori the^ me:S.sag.e: is 
not allowed through the first software means . 

.:3..9'.. {.original,} :The: system of /clmim 3 8 whe;rein the at least 
one database inclndeB one of the fol. lowing: 

a) a central database; or 

b) at least two centrally-ma:i:nfe idatabases^ each 
storing, and G.oiri|3dl.ing; dif f erent inforniation and s'tati:S:t.iG.B>.. 

40 * (original) The s.y^stem of olaim. VS. 8 wherein the- at least 
one. database a:nd the- 'plurality ' o reelj>;ientS:- are -^meiiibers: -.of ^ an 
e-mail 2?ietwork. 

^1. (driginal-) ■The sys.tem-.- of ; ■:Ciaim :3-8 fttrther Gotnprl.sl:ng- '-an . 
•incoming: mall 0€x^^<s: Ini- lietwor^k^ eoitneotdion with each ^of- t.he-- 
pi tiral. it- y- of r e'-cj;! j^ii^h t-^" . 



42 H {original) Tlie sy'ssteJK: of ci^im 38 w3aereiri %tm act;uai 

:a) an e-mail ^ddr^es© iis^ti ii^ thes sender ^ 

c) <ipnia;x3i: n^ine used by the sender ; 

d) a f ilial IF address tieed By tMe ^eiider? 

e) a f inal dlbntain tiarM ti^ed b^jr the sender ; 
£} a user^ageat :;. 

g) a' '■fc.iTrie20inei7 

:.h;):. a; .s^qiijr-oe; W' .addreg^a^: 

.1:} a' .n^me of /Cl^^fiistt: •.softwaa^e-: ^used- -tes?' the- .-serider.; 

: j ): a' :Bandmai.It.- ^ei^^ion- used: a first ^reiceit^eii:;;-- arid- 

k); an ,I.P pafch/tilaed t-o ■rtrt:i:fce' ^t^lafe TiiesBage* 

43 - (original) The syBtem of claim 38 wherein the actual 
semder is idantif ied by a Bignature including a range of IP 
addr^:^:ses and at le^st one of ;the. following fields f rom^ the: 
.m^S:-0ag© header: 

a): an e-mail address: used ':by the render:;, 
h J a display name used toy the Bender; 

g) a domain name used by tha: sender; 

d) ^£he :f inal IP address used by the: sender:; 

e) the final dotrtain name used by the: aender ; 
f:) -the .name of - .elient- ;so£t%tfare: .uaad: by the .actual 
sender; 

g'} use-r^-:c^ent:.; 

h) timesrone ; 

ij isoiiroe:;: IF address.;" 

■j;:) ::s::endmai:I version UB:ed fay ..a ,f irs:t:' :.re:cei^r"; and 
it;) .the ;pa:tli: used to rout a; the message... 



:ei't;.ii:^^ir first- oit Re^iorid. softwaare: rfieans iiaix^' 3t.^t3.Sitios 

cottii^iled at feh^ at l^ast otiB dattatfoas^^ to G<i5itij3xit6^ a seore 
indjlcafeiiig a; IxkelilioocJ tiiat thi6 iredex^re^ cnessag^ 1^ an 
unspiit ieit ed me 0 page ^ 

■4S,. I^origxnal;) ■Tiie ays tern of ■•<£;lia±m 4:4.: ^wherei^^i- :t]n^ B<2b3ine 
iiiC:rea:3:eB: ,ae a rriatnbel: of acGepted Imaseages having the.: same? 
inf ^:>r-mat.ion about tiie isender a^^:- 'tlie receit^red •itieB^saLgfe:- 
iTic;raaB^s^ the inf Qtrm^tipii including one of feh^e following r 

a) '^tha ac^fcualw ^0rid^2?>;: 
b} a f i:iial. :addira3S:^./ 

g) a f inal, dorttain n^nie;- Ox 
d) an. .IP: ^/path* 

46 . (or-iginal) The system of Glaim 44 wherein the score 
decreases^ as a nuiTiber of- rejected., ■rnes^sag'es ha^i:ng' the. same 
information about the sender aa the reeeived message 
inor eases , the in£ormatiQn ineluding oBe p£ the f oil oia/ 
a.);: the actiial sender; 

b) a final IP address; 

:c)- a final domain name;;, or 
d) an IP s^a^th . 



47 * (porigiriail) Xlim system of <aiaLim 3S further ^orn|>risin^ the 
..se^cppd; -B^jof fc-ware. ;trte.a;ns. ^■ti:raG]<Li;iig: -at ieia-st orte- iof t.lie- .fo:!- lowing 
pieces ■■•of- aiifo:rma;fei:C>ti -aib^^yLt.: tr^B^^aQeB^- Crom siandler^-:. 

b) a. tJot^aS. iiurnb^r of tnes sages sent cnre^r a fxiJ^at 

g) a isotial mimbe^r of mfessa^ges Bmrit: t^o reaipienfcB in tfcie 
meSwopk wiio ha^ire inGi"i^:e<a the sjerids^ oil at i^^i^feieeilet^ 

4) :a nurnt)er- of mesaageis' :.^efiti to: Ire^ej'ipAeiltB: In- 'titaiB 
network wlio :hai/e-: ':iiidliieJ:<fed^ 'feJSe: ^eriaei: 'On- til<s ■■iftslri-itr^^l.is.it: crii^^r a- 
s^i^ond pr^^ time period; 

e) a niamtser of a^ecipi#fttB ^ho liai/^ liieliided ttoe render 
on the raoiE>ient.' ■v^ii±t;^;0l:i^ 

f ) a total riiiTTifoex: of time^ a r^dipxent cliarigfed a 
:S:ender:'' b whiteliS:t7^:l:DlaG&iBt stattiB;: 

^) a Huraber of t imea a recipient changad a sender - s 
whitalist/foiackli ;stafcuie owr a. fcfeird predetermined time 
period; 

h) a total mimber of rnessages sent to reeipients in ttie 
network.; who ha-va, not inoiuded the- sendear on the whiteliBt..;:: 

i) a mimber of messages sent to redipients in the 
network: who .have not included the-: render oh tlie ;whxta:l:i-st over- 
a fourth predetermined time period; 

•-j-) a total number of unique xeeipients: in the nettftfork 
wiio^ hai^ reoeiwd at least; one message^ from, the sender? 

k) a total nnrBber of pessage^ sent to unique recipients 
•in.- the- ;net:Work who ■hav:e inoluded the sender' on the 'whitieli-st.?- 
:.arid. 

1.)' a- t-otal nurRjDer of: :TTieB sages sent to unique reeipients. 
In the network who ha^e not inoluded the sender on the 
whit-el ist../- 

whereiti ■the ^sender-- Is^ iden taf-i'ed by .one of., the group 
cd^si-st^iri^ of "the a-crjfcual. sender >. the f inal 1-P addre;S:S.> the 
fihal: £toma;ih ■riame or "the iP^ ;path: "u^ised tO: s^end the. meB^saige , 



its.,. (:c^t^i:enfe'3!y. ameiidied) .Tli.a ^j^^tem 6^: ■di-aim .:3:8 t^iie^reiri. 
aoitipilitig- -s^d^fcx^^ abjDtit.. Be3:idears- xriailMes- at.- least:: one of- 

thCe f Oll0^iil0: 

a) v<aa€:^:±-mimrig a rafeio of :-a first :i^titnb.^r :e-:mail 
maasag^s serit fe^r a a^ndeir r^eijii^^it;^ £n the network wko 

time |>e?:iod axi/icied iS^f a a^copd! numtoer of e^insail tti^ssages sent;: 
by ttie aeTi<3,er' fcQ user:s in the rietiwc>:c1<: in: tii^ yp3:^^<a^t.eM^ 
tXTTtB- period; 

b) de termini rig a ratio of a first nunober 6f refeipiexitis 
in the network who: Mav^^- x^rjclufied • the aender on the wl:iit:el±.^t- 
divided hy a, second: nutri^^ of tin±-qufe r^cipiairats in thfe .ittetwoark: 
who recai-ved: e-^rtiail-s.- :fe^C):rti: the se^iijcj^^r'' xti; a pi:edi^teirm.i?^ titne 
period;, 

e) detearmitiing a ratio of a first numbar of times in a 
predetermined time interval a message from the sender was 
mov^ed from a whitelist to a biaokliat divided by a second 
.nnmber of times a meBBage fram. the: -s^end^r; :.wa.s moyed.. from p., 
whitelist to a blacklist; 

d:): determining a ratio : lof a: ;fi:rst number of timeS; in a 
predetermined: time inter-^al a mesBage from the sender was 
•Amoved from, a blacklist to a whitelist di'^^ided. by ;a :seoond 
number of timeB a mesBage f ^O-m: the render ^ was moyed. f rpm 
bia^eklist to a. .vi/hitelxst-;;; 

1^) determining :a,. ratio of a f irst namber of uniqi-ie 
■users wit bin tM^ network: wixQ ■;!wteitelisted the Siander-^ within, a 
■ptredeter mined time period oompared to a second number^^^of:' 
■nniqtie xisers- within the network who: biackl-iated tte.. ^^lende-r '^^' 
with ill the predetermined time period; 

— ■^d€it:drmxni n g ;a ■■■ ^r^afc^i10^^^^r^ef leot ing ^ ' - whothc:i3r - "-ttee"-sendDr 

thG.. :p.e:hdGr en the wfo - i:t:eM - sti:j: : 



§f £} d^stetrmijrxiftg ratio ref Xe:etj:iBg; .a flrHfe: titirnls 
wari;C^4 messages sant by the ^eiiSe^r cornpared a secoricl nutnbaar 
o f li^antWanfe^ d ti^^l me a a ages ^ ent: by feiie ^end^r ; 

2) det^tmitiirig a difSererxce betiMeen a Cir^t niutmber of 
^^cpecte^d massages aerit hy t-hm mem^T arid a aeGond imrnfeer of 
une>?feect:^d ities sages sarifc isy ttie sender; 

•det^erminitig- a dif fferarice bat:: ween a ft^sfe. rmitiibier ' -c^ 
times-- a xx0^i^' •Wli^ifc^el::l:sfced .a- "mes^^age-. iirxkn tiie ^:^tid@:r^- and a. 
ebtoond nurnber fcinies a user faiacIcliBted a message f rom the 
sender:; aiid. 

^ 1) .determining differeiice ref leistliig ' wke^ 
:8end^r sejids' -a majt^ritjr-- of - :me^sj sages- t;G k^iown reGi;pie'nt-S::> 

wlrierein ttie serider is ideritif ied by otm of the grouji 
.cons'iating of tiie aet^ual sender'^, 'the f inal- l^P addres.;^, the 
f iaal :de>mai:n name,> or ■.the' li^' .giath: lised to seald fefafe- misssage.. 

49 . (original) The system of Glaim 3 8 further ce?npr-isirig the 
.fix^Bt. .software ^means: placing; a me-ssage which-: i©' not al:lc>wed:- 
t-hrxDiiLigh the: e.-:rifiail f iiter in. a. :8g>^m f older ^ 

5 0 , (iOriginal) The system of : claim 49 f urther eomipri;s:irig t^he 
second spf tware. ^means monitoring the -spam ..folder at 
■predetermined; Internals to determine "whether messages in the 
folder shouXd be- relaas:eid because the. rep^itation #f the: sehdi^r 
- has^: ■ehanged... 

51 V Coriginal} ^-The pya:tem of: claim- 5:0 Eur ther ^ jc-ottp-rr^^ 
sm^ond aof ;tware-. ^rneana wpnitoring^ the- .inbcsx: .at :E>redetermined 
intarvals to idet ermine whether messages should remain in the 
inbdx. 
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seiqdxacS s^sf twaris means maintairtir^ at the database at least 
f fcyiir' of febe-. f iallowiiigf • ^^alues r: 

a) a niirftber of irie^sage^ which were explicitly rarlK^S 

is) 4 rnambietr of messages whick wer^ ini^licitly rahked 

gQbdi 

a narriber 6f v/hose ir^ahkirig unkricsw^ 

d) a riurnBer of me3 images which were exjsiacltly ranked 
feadv and 

e3 a nurdber of Tnessages which were iirpiicitlsf i-aiiked 

bad; 

wherein. t:he vaitie^ aire :based: on- :meiBsage:S having" thei :s:ame 
•iiif ormation ab^ut the:' ■■sender' Includingf dhe- dt the: .follGWi^iig:;: 

a) : the actual sender; 

b) a filial IP address used by^ the^ sender; 

c:J. a f.irial domain name' used by the.- :sende3:r:-; or 
d) ma 1 1* pa th ti^ed by the sender . 



S3.: {original 5- The^ system of \cIaii:Ti 52 v^herein the valued; 
r-epxe^ent one^ of the following:;., 
ai message counts; or 

b) .ratings of unique "users within the' network ^ 

54.. Coriglnai:) The syH-tairi of . claim 53 ■f urther Gonip3:isi:ng.. t^ 
second sof tware^ ;meane returning at leaet. f our- o:£ the.' yaluea 
being to the reGiplent:: to allow the r^edil^ieiit to ■appl.y 
difSerent- .weights to a-- .inessage- in order to -categpra .the- 
me s sage . 

•S5:, lorigin^i) 'The system: of. Glaim 38 further ooTng^riaing :a- 
third sof tware -means tracki^ng- viocal- .st.a.t;i,s;t 

rden^tif ied^- by - data .in the me^^s^age header at a local database.-. 



56 , torigirial)^ The syBt;em. of 3:8 f urther comprlsiiig fche: 
second :Sof fcware^ means assessing the reputatioxi of:' the :0en.cie.r 
^£ a. TpomiyB<i mea^^-ge. when.: ixseir acti^ity^ :.iB observ:e.£a:.: 

57 , .(■orig.inal) The ays.tem of claim 38 f urther comgirising t he 
second sof tware means aending;; recipients:; a. notif ication when 
any sender' b reputation changes . 

58, (original) The system of claim 57 further oomprising^ the 
first: sof tware meane; ^rev'iev/ing" all rnesBages racei'ved i.n a:^ 
pr^edeteirinineci^ fcim^;- period :p3risced±iig receipt of :the- 

nbtif ication and; tij?<3ating the eafeego^risafcion of the ittesi^ag^ as 

59 ^ {cii-rrehtly' aTtiehd^ed;) In. a: ■pieti^/orkr Bf B^em ^or- pt^cmm^tiW: 
e-ma:!! ities^aifes C:Qi«pi:ising ; 

fe^l- , a - . . . . pg;tjt --K # 3 ^t;: of- ;•■rG^di^g ^ a:€ij::ltD• ^i ^ efr -- e " Caa;jb-3y. - "me^ ^ iii 

■ network . G ' ohhag .tl. O[h- : Mt •th;e- - plura^i-t:y q an-do: ^-:/. etagh- ' Of fchc ' 

rc c ip i oztt£ 3 -te a £i^ g frte"fflO^^^ fox fl3.t:Qring 

■■■ rp - op.lY Q' d " ^ -m^xl -me^ 

S^- dateafaase ±n network- g^ormeo comtmfetic^ with 

fehe plxii^ality ei xeqipienta of e-mail me^aages^ each of the 
re;pipi:et!iLtS: :ha^-ing- firr^t ■sof tware meahB foig- fl'Xfeeirihg: 
■receiTe'd e:-^--ma.il- irie-ssages ^ the database^ having- ■a. 's-^fecoiid 
:^<Df fcwajre 'meahs:: ^f -Dir-^ :perf ormxng the f iSllowing r 

i) receiving' infoxiriation aboiit e-tnail massages 
:f rom-. fche recipients of the ■mesa^a^^ee wh^reiii. the inf Qrirtatipn 
:re^^^i^eicJ iricXudep; 

M art ideiitification of a sender of a first 
message based on data in the i^e^^ag^ including at lea^sfe 

■one of the f o 1. lowihg •: 

.1) an. .actual render ; 



II) a final XH a(id3r^ss ^ised by the 
Hi:} a, f inal iiomaia natna used by t-lie 

aender ; oar 

IV:): /an IF path used by^ sert'der;: and 

B)' an. indication: of ^hetlie:r t::he^ recipient 
.•e©^jrd:^^ed : c:la:BBi £ied t-fee - f ix^et: lE^eaaage aB good or bad ;. 

■ii) compilliig^ :statiBtiGa f or senders o£' :messag,e3 
t^hM s^tat is:t ic's i.ne:I . udin^: . a. total riurnbajtr of me-s aage s aai^t: to 
: ianiqu:e reci:pi^.n:tB in 'the, network who Haye^ included .the: sender 
on a. :wfaitel:i:et .,: wheirein t;he s^t-ati:S-tid-s a^t'e- .oj^sed: to^ di^te:£min^ a: 
^^tider' 0 repii f or 0andin§[ good vm^m^^} and 

iil ) creating a list of siend^rs with good 
■:rep^.fe;!^ti:0.i:is thfit tiiay bfe r^ef ^leiiaiicec^ ;rB^pi;pient:a- o m#S0a:;ges 
from iiiikndwii sertdar^ in the nietwork, vjherein a second mefssage 
from ■pile :sender on. the.: Xis.t i.0 • :a;il.pwad 'fchrems^ th^^ x^irP^t&O^' ^ 
fxr^t spft^^ for filterirxg a^ec^iv^d and a 

thirS mess^^g^ f-3;rpm ^another .sender not oh the li:^t.- ..lis. 'not 
^llGwed thirongh fche recipient' is first sof twa:re means for 
fl-l.fcerlhg-: reoaived- iiiesBagres 

^•0 .. .(orig^inal ) The syst etici.' o:f claim :t^^herei;h. the. at leasE't-. 
one datai>a;se inciudes one: of the fol:i.pwihg;? 
a ) a. central dat:abaser or 

ib% at ieaB:t two- ae:ntra:ll:Y:--^maih:feained.. databases-, each 
storing iand oomgiling dif f erehfe informaLtion aixd istatiBticB , 

^.i. torig-lnal) The ^ systmn of -olaim 59 wherein the: .at^ lea:S.t: 
one database and the plurality of reoipientB are members of ah 
e-ftail network, 

62- (original) The system of claim 5 9 further oornprising an 
ineomihg mail server in networlc Gonneotion with each of the 
plur al i t 5^ of recipieht s . 
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$3 . (oiri^inal) Th^ System q£ sslalm 59 the actual 

g:^il4er is .i;.dent;.i.f.iejd. toy a. ;s.i^na;tura fe^a:^iBgf afe: ■ieasfe: t-wo- :o£ t::he- 



a) 


an ^^-mail adcir^ess used by the sendeir; 








a} 


■a: 


doiftaan name ti&ed By t^he aender ; 


m 


a 


f itjal I P addr^e s^s its ©id by the seindeir; 


e) 


a 


f inal ddttiain narne ttsed by the i^ender; 




a 








timaspne; 


h) 


a 


sQUirce ;addue-s^i.;;:- 


i): 


a. 


nama of clieiife spf trwaire tised by the sender^ 


j) 




s;end;nTa±:i y:#r:jS.iitDn-. ^u^ed by a f irs^t dr^eo^dve^r.-; .a.rid 


k) 





:.6'4..- ;(pr,igirta:lj^ The ;Bystem of Glaim 59 wherein the ac^tual 
sender' is Identif ied by a signature inciudt a range of IP 
addresses and ;a.t. leaat one ;Of the; f pllawlng :f leldp from; tMB 
:'n[ie:;B#age header t 

a) an e-mail address used by the sender; 

b) - a diaplay ;name uaed, by the :3;ender; 

c) a domain name used by the sender f 

d) the final IP address used by the sender; 

e) the final domain name used by the sender; 

f ) the- -name q£. ..client: sof tware psed by tiim, ;aqtual 



gt :nser -agent;-; 

h) ^t..iine:2:.dna.,;-^ 

■il: -igource IP. address; 

j) sendmail ^erelon us;e;d.: by a f ir-st^ receii/er-.;. and 

.k-) ^:tile IP i)at.ii- ■lised to ;rQtit:er 1:-:he !Ti:esaage , 



seeQiid sof twai<:e means usirtg Bta^tistiGe cpTEyplXeel tim at 

S6, (original) TK^ ayat^m og elaim ^5 fiirfelier cQmprisdng 
addiiag a saiider feo tbe listi when the saniJeir^ s rejp.t:ati0n 
gj^ss^s at predfefeetrmi^ ishreBhold |ii<ax;catitiir^g a good r^pfUtafeiori, 

JS7 V {c>rigirial) The systefei of claj^tn fu?rsh^3r qsonnpi^lsit^^ 
i?ifemo"^ihg^ a sender f :roni Eke list when bhe sender 's reputation 
is b^lbviT a predetermines! threahold indicSttin© a ?good 
xe|5tifc.^tlon. * 

68 . (currently amended) The system of claim 59 further 
comj^rising the seoOnd sof tware tneahs tracking at least one of 
the following pieces of information about messagfea f rom 
Benders 

a) a total nurnJDer of messages sen t; 

b) a total number of messages sent a first 
pxedetermined time period; 

c) a total numbe:3r of messages^ sent to- recipients in the 
network who have included the sender on a whitelist; 

d) a: number of' messages^ sent to recipients in the 
network who ha^y^e included the sender' op th^S:-' whitelist :Q"ver: a .>- 
aeoond .predeterinined time period;. 

^e:) a number of recipient s who .hav^e i^^c2iud#id. th^ sender- 
om- the reo:ipieiit;:^'a vhitelist;? 

;f) :a. totaa, .nuiiT^^ times ;irempi:!^ht changed, 

sender ^ s w;hiteXlst/blaeJc^l^^ sfcattP'^;; 



■wfei;ti-^list/tol:a6kll:Ste ^status ovrelr: a t:lali?ci preaefcexiniiietl. ^:tL:ime; 

ti) m tot>^l number of Tt^ssa^:^^ sent: -fco; recipients iil tlie 

i) ^ tuimtjer of inessaofes serit to recijjient^a in fcke 
nett^g^prjt wftb ha;ve not irielnded the sender on the wiriitelisfe o^er 
a fioiirth iDreSetermil^e^ time peridid,; 

j} a total ni^rriDer of iinixjiiae recipients in the network 
who hav^e reQei^ed at least one mesisage f rom the seiHier; and 

: :a -feefe^ e jrH E^^^ of TTLd a Q^lg cQ- ecDilt ' o: ' ' 'iariiqiiG- rd-cxprexitB- : 

an tho ri G t : wQ\] ^]c; who vh j si^i^e-^ the oQtid e ^ on th e— wtefefee^ 

i k) a total ;i!TLi:rnber of" rme^^agea eeirife to ■■uni<jue rec.ipxerits-^ 
in the network; who ha-ve not ineluded the sendei: on the 
whitelist , 

wher-ein the sender is identif ied by one of the grotip 
■Gonsisting of the actual sender, the final IP addreaa^ the 
final domain name, or the 1^ patih uBed to send the messa.ge* 

6$> (original) The system of claim 5 9 whe:rein compiling 
statietloa about genders inolude:^. at lea.s:t. mm of . ^the 
fol lowing- : 

a}^ ;4ete3:rminlng a. ratio ofl a: first: number e";mail 
:tne;:SBa.ge:s -sent, by a sender to^: reo:ipientH: in .the ; network ^who 

ha-v^e incl^ided; the Bender- on^ a- whit ell^^^^ in- a predetermined 
•tiMe period di^i^^ided 'b^ seoond number of e-maal me^sBages sent 
•by-' 'the Bender -to^ users^- in the. ^network:: in: the p^^edetermlned.. 

fei^me period^-; 
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tn fete network who feLa:v"e xBOlinaed the aericJer m t^fee ^itellst: 
who received e-mails f rom ttee sender in a paredet-ermix^ed fcime 

g) d^feertftiniiiig a ratio af a f irsli ni:mstoer of tiities in a 
pred^terTtliti:^ fextne intarvrai a message from tiie sender was 
mbiired. /f rom a :wiiit^el.i.Bt: t.a ■:a: ;bl.acki lsfe ^di^idfed -fay a aedonc^ 
numbe:r-. of; times: a m^.i^;Bage: -fa^btn the' isandeir' was. mo^ed firdtri' a 
^hifeeliat, to a felaLc;k:.list.:; 

d) deiteriTiining a ratio of a f irst riiiretoer of tiineB iri a 
predefeertni0e:d t itiie intertral a messa:ge f rom the sendar was 
mov^ed f rOiTt a bi^dkli^t to a wtiit^li^t di'v'xded by a s^Goritd 
number of tima^ a message f rom the sehder was mory^ed f ronn; a 
tal.aclcli:B:fc. to a white list:; 

■el deterTnining a ratio of a first number of unique- 
usera within the hetwori<L who whitelisted the sender within a 
predetermined time period DOTHpared to a seGOhd numfeier of 
uni^cgue users within the network who. hlaofeii^ted the sender 
■within the predetermined time period;^ 

f j determining a rait io re fleo ting whether the Bender 
sends a: majority of^ maBsagee: to re:cipients who ;.ha^e Inpltided 
the aender on the white.! i:;st; 

g) . determining a. ratio: refieGting a f irs:t number- of 
^wanted me^sages^ sent: .by the sexider eompared to a. seoond .number 

unwanted or: tot a:! :.me:S sagas- sent by t he. .sender ; 

h) ■det.ermining:' .a . dif f^ :i3iet;ween. a first httii^ber:- - of 
exjjeoted ':rhe:S:a:ages sent.- by the :©^en,der;: ^at^ad ^; r^eqond .number; 
une^^fepeoted messages sent by th^ is^nder; 

.i;) ^d^t:e-rmining- a dif f e:renoe .between -a :f :i:.rat.: nu^teear- ;of 
tirnes a: user wh.itel.i:3.ted, a ine's.S:a^e imm the., .sender and a 
^.ebbnd number ai-- :'times: a-, ^usar .bi.a:cki.isibed a;- -mesBage:^ :;£rorB the 
;se;hd<&r ;. and- 



■j;) defcieii^miHing dit:£erenee.-^ ref tecfci-^ 'whether tlm 
seBcier sertds a majority d£ messages to knowri redigiieiit^, 

^^irelii tii^a sen^^er is id^ntif by x>tm of the groirp 
ediisi'stlrig: -eif fche^ ^actual sencter:,. -fch^ ^iriai X^&- 'aclda^ees:-, the 
fiiia:! Sdma^S^n- natrie^^ ..or- th^. .-IP path: Misaiia tp/ Bend- the messiage*. 

*70:. (original) Ti:ie: isyat^rrv :0f c::l;a;im: f t^rthez^- -doti^r^^ 

f ii?st sof tw^ire means plaoing a messagre wkicii Is not allQweiGj 

tiirough tiie e-mail: -falter^ -in a ^pani:: :f olderv 

71 . (origfii^al) The s^^fcettt of claini 70 fiirtlier ootnE^rising tiie 
secon^^ sof t\s3ra4re rneans mofeitorixig:: the ^jpaiii f olcieir at 

pxedeterminea^ ^r^^ to determine whetheir- in- .the 

f older should be relBaaed because the refutation; .of the., sender 
ha^ changed- 

72 . •:(or:iglnal)- The system of elaim 39 furthe:^^^ qomgriping' the 
s^econd aof tware mearis; mohitoring: the :i-nhoX: .at predetermined 
interval.s to deter mi he..: whether rneasi^.g;'^^ . should remain in; the 
ixiho3^. -. 



four- of telle- foLlo^ing ^luLeB-S:- 

a) a numb^3r of tBe^s^gfes: wihi^H weire expliqitiXy sraitike^l 

g:) :a: -Bi^iiifeeper^ of messages wbos^ ^arikirig is- urtJcii^^^ 

bad; 

Vtfha3reiii fctoa values are baspd osi mepsag^s haying the ^ams 
Irif e^ir^tiQn ahQut the seiidar incl tiding ope of the toXl^wlrtg : 

a) the; -signatuire.;^ 

b) a f inal IP ; address used by the sej^ider; 

c) a f inal dornaln name used by the sender; or: 
;:d}; an: gath :used by tim sender--. 



74 . {original) The system of claim 73 wherein the valuer 
represent one of the f pll-Gwingr 

a) message eounts ; or 

b) ratings of unique^ users v^ithin the: network.. 



1S\ (original) The system of -elairn -.SS further GompriBing- a 
third software me aha tracking:; local: .:S tat i sties about :senders 
identified, by data in; the message header a;t. a. iQeal database. 



7S, (origihal-^ The ays;t^m, of; ;G;l;a:irri: 5-9 f urther coittpri^^s^^ the 
■se;Gond. S:Of twar^;- /rneah;^ :aa;^e^-;^i.ng:. %Ke. reputat ion of the ■sehder 
of- -a reQei-v^ed TneB:sage :'Wheh, u:s^^X'- aotivity is :-ob^^^rved - 



^ecorid scSStware ttieaxis sendxBg ireodLpienfe a iK^ti float ion :\fl^hen 

JB . |o3r±glnali Th^ system -of -.Qi^iTTi; l'? f^ijrtfat^ir o^5rt^p:rigil:i;ig-- tim 
1 ir^t :-sio€twa±r^' meaiis reviewing all mes^sages.-: .reiSeiv-eci Iri: a-- 
gred^eteirmineat t±Tna jg>^Sr:i^i>d pir^aeddng receipt '^£. tlie 
notif-ieatld-ii '^^ana.. updating the ■categoirxsiati^jn. o£- • fcii^ . measag^:: ^ 



